$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft File: Knm5FIbofS1169kQvW5xlzfdglk.mft (raw, json) Hash identifier: sLO2SiXGYgbAIycYluDfExAwggXhiqf4OZbCChL1TYw= Subject key identifier: 14:7F:8B:A1:EB:B2:7D:CC:09:36:47:C2:EF:2A:CC:F1:AD:9F:76:C7 Authority key identifier: 2A:79:B9:14:86:E8:7D:2D:75:EB:D9:10:BD:6E:71:97:37:DD:82:59 Certificate issuer: /CN=A911B432/serialNumber=2A79B91486E87D2D75EBD910BD6E719737DD8259 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft Manifest number: 0C Signing time: Sat 05 Sep 2026 08:53:17 +0000 Manifest this update: Sat 05 Sep 2026 08:53:17 +0000 Manifest next update: Sat 12 Sep 2026 08:53:17 +0000 Files and hashes: 1: Knm5FIbofS1169kQvW5xlzfdglk.crl (hash: b1BFL2TBLgFyvZp8DFD8KjyUnycYXTjBCZSmrKyh2Ok=) 2: BB1FA2F09F7C11F1B87752203B11F970.roa (hash: IAfsBvQacuhtNdOUREbUyMQwJzL25wN9OZvl4YWyX9c=) 3: 72EFC76C9F7C11F1ADDC3D1C3B11F970.roa (hash: stcwTILI7jYqbP/8Ad56tb/Lm2uiKLB+57zQTKtqH80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.crl rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 08:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B432, serialNumber=2A79B91486E87D2D75EBD910BD6E719737DD8259 Validity Not Before: Sep 5 08:53:17 2026 GMT Not After : Sep 12 08:53:17 2026 GMT Subject: CN=6a9bd87d-190c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:5b:f1:47:e7:50:c0:10:b4:37:d3:3f:b7: ce:46:78:83:31:b4:b5:14:80:33:a5:b9:23:22:d2: ce:d0:f3:7b:67:b1:db:19:26:93:b7:ad:8e:3a:b9: bb:48:37:01:d6:66:30:43:9a:d2:b4:f2:77:d3:47: 22:ba:a0:f2:c2:76:df:1f:5d:db:1f:d7:c7:a9:e1: 28:63:63:9f:d5:f8:c0:f3:e9:b9:14:9f:6a:b6:50: 9f:51:98:b6:9a:6e:48:1e:92:49:cf:4a:a2:f0:2f: a2:c8:97:7e:17:26:6b:eb:e2:bb:45:f2:4e:8a:c4: 49:12:f6:ca:f1:41:23:5e:1a:de:2e:4b:a8:30:3d: f0:9e:b9:cd:b3:80:da:a0:3d:05:c5:08:47:03:02: e6:a7:bb:93:a7:30:e4:63:64:15:fb:7e:3c:50:8a: da:d2:b4:1d:71:de:d1:09:34:cc:51:35:2a:7b:87: 8c:47:3a:35:86:a0:f8:fa:fc:f0:8a:57:c2:90:87: c9:f7:1a:11:80:25:6b:e3:ea:9f:ad:84:28:28:d9: 12:24:11:d0:fe:13:9e:4e:af:0f:38:d1:59:48:4e: f6:28:32:8e:23:09:f0:31:ba:2d:cb:39:1c:3e:1f: 6f:e3:42:a0:b8:29:6a:0f:34:08:39:ae:c8:dd:13: 72:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7F:8B:A1:EB:B2:7D:CC:09:36:47:C2:EF:2A:CC:F1:AD:9F:76:C7 X509v3 Authority Key Identifier: keyid:2A:79:B9:14:86:E8:7D:2D:75:EB:D9:10:BD:6E:71:97:37:DD:82:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ab:c2:a6:30:4f:17:64:bf:00:e6:5c:f4:2a:fb:d5:71:2f: af:c3:13:9d:61:5e:68:a4:54:95:43:9c:ee:82:5e:b0:bf:ab: b7:ba:35:ab:d0:1f:85:3c:78:c4:1c:5c:b2:e8:c4:ab:a7:ea: eb:c3:4c:a2:cf:72:09:0c:f4:f8:64:ce:da:90:0d:66:eb:75: 70:e1:f2:be:3f:09:2e:c2:f0:c6:ce:53:c6:d8:37:8e:64:85: e5:90:b5:50:bb:5e:b1:9f:3d:ba:06:c0:9e:ff:74:42:a5:f6: 28:41:87:6e:d1:b1:b8:e0:9e:8b:df:9f:cf:98:18:d3:90:9f: 9a:96:ca:02:e4:95:fe:43:65:12:64:54:87:ce:5c:21:8d:78: b7:a5:1b:c0:42:9f:f6:ea:69:d2:4d:30:b4:35:ba:bd:49:81: 4d:04:3b:91:24:b0:e0:7b:5f:c9:ac:bc:a2:3d:d0:b2:3d:9f: a3:18:b8:14:93:90:4d:28:d0:d1:53:53:81:7b:3d:79:34:90: d8:d4:a8:b3:04:a3:5d:0c:c9:66:3f:ef:ab:9b:1b:50:fb:d8: 83:e2:05:16:6c:66:fe:34:fa:11:d5:bf:37:3e:9c:25:cb:48: a7:36:72:a3:3b:ac:6d:03:ff:c1:b4:bf:cf:40:34:47:bd:bc: 50:6f:b4:bf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjQzMjExMC8GA1UEBRMoMkE3OUI5MTQ4NkU4N0QyRDc1RUJEOTEwQkQ2RTcxOTcz N0REODI1OTAeFw0yNjA5MDUwODUzMTdaFw0yNjA5MTIwODUzMTdaMBgxFjAUBgNV BAMTDTZhOWJkODdkLTE5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBVFvxR+dQwBC0N9M/t85GeIMxtLUUgDOluSMi0s7Q83tnsdsZJpO3rY46ubtI NwHWZjBDmtK08nfTRyK6oPLCdt8fXdsf18ep4ShjY5/V+MDz6bkUn2q2UJ9RmLaa bkgekknPSqLwL6LIl34XJmvr4rtF8k6KxEkS9srxQSNeGt4uS6gwPfCeuc2zgNqg PQXFCEcDAuanu5OnMORjZBX7fjxQitrStB1x3tEJNMxRNSp7h4xHOjWGoPj6/PCK V8KQh8n3GhGAJWvj6p+thCgo2RIkEdD+E55Orw840VlITvYoMo4jCfAxui3LORw+ H2/jQqC4KWoPNAg5rsjdE3JXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFH+Loeuy fcwJNkfC7yrM8a2fdscwHwYDVR0jBBgwFoAUKnm5FIbofS1169kQvW5xlzfdglkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNDMyL0UyNEI5OUM2OUY3 QTExRjFBQTA5RTFGNjNBMTFGOTcwL0tubTVGSWJvZlMxMTY5a1F2VzV4bHpmZGds ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS25tNUZJYm9mUzExNjlrUXZXNXhsemZkZ2xrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NDMyL0UyNEI5OUM2OUY3QTExRjFBQTA5RTFGNjNBMTFGOTcwL0tubTVGSWJvZlMx MTY5a1F2VzV4bHpmZGdsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyq8KmME8XZL8A5lz0KvvVcS+vwxOdYV5opFSVQ5zugl6wv6u3ujWr0B+FPHjE HFyy6MSrp+rrw0yiz3IJDPT4ZM7akA1m63Vw4fK+PwkuwvDGzlPG2DeOZIXlkLVQ u16xnz26BsCe/3RCpfYoQYdu0bG44J6L35/PmBjTkJ+alsoC5JX+Q2USZFSHzlwh jXi3pRvAQp/26mnSTTC0Nbq9SYFNBDuRJLDge1/JrLyiPdCyPZ+jGLgUk5BNKNDR U1OBez15NJDY1KizBKNdDMlmP++rmxtQ+9iD4gUWbGb+NPoR1b83Ppwly0inNnKj O6xtA//BtL/PQDRHvbxQb7S/ -----END CERTIFICATE-----Generated at Sat Sep 5 18:35:17 2026 by rpki-client